CVE-2024-35989

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37

Description The issue occurs during the removal of the idxd driver on single-CPU platforms, where the registered offline callback is invoked as part of the clean-up process. However, with only one CPU online, there is no valid target to migrate the perf context, resulting in a kernel oops. This happens due to a page fault for a non-present page, causing the kernel to crash. The problem is fixed by preventing the migration of the perf context to an invalid target.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.37 or later. If updating is not possible, consider disabling the idxd driver or restricting its use on single-CPU platforms until a patch is available.